You can offer this feature without sending unnecessary information to your servers. You did it the easy way instead of the "right way". You need to re-think y

You can offer this feature without sending unnecessary information to your servers. You did it the easy way instead of the "right way". You need to re-think your architecture to do these checks locally in-browser in order to protect user privacy. If you're concerned about scaling issues, take inspiration from how Google Safe Browsing works (local hash prefix matching & partial hash queries).